Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7873E4989F9A11F1A5043CDCCE1D38B0.roa
File:                     7873E4989F9A11F1A5043CDCCE1D38B0.roa (raw, json)
Hash identifier:          8g6ZV4Y7/AC18iIEs7CmY47qRbF0E4pyB/pRwdSCc68=
Subject key identifier:   72:59:39:E2:8F:D0:EC:3E:8B:44:C3:04:B9:6F:E4:EC:1C:68:AF:A4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E22F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7873E4989F9A11F1A5043CDCCE1D38B0.roa
Signing time:             Mon 24 Aug 2026 09:02:02 +0000
ROA not before:           Mon 24 Aug 2026 09:01:58 +0000
ROA not after:            Tue 22 Sep 2026 09:01:58 +0000
asID:                     401701
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123439 (0x1e22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 09:01:58 2026 GMT
            Not After : Sep 22 09:01:58 2026 GMT
        Subject: CN=6a8c088a-8fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bf:24:f2:00:f7:85:7e:4a:73:35:f0:4b:61:
                    57:00:e1:c5:73:e5:e7:a1:95:c1:be:a3:87:cc:d1:
                    80:12:e6:e3:fc:2f:96:bc:ee:ee:8e:4f:93:d7:23:
                    d0:fe:b3:f4:d7:9a:6c:2c:f0:d3:43:b1:86:4b:b8:
                    67:8a:b1:92:c7:1c:1a:30:30:c1:98:8e:28:60:7c:
                    d0:eb:e5:35:63:3d:ca:2b:f6:93:a9:87:a8:b9:96:
                    a3:b9:35:3c:e1:49:1e:c6:53:56:c0:65:7f:8b:bd:
                    9c:6e:94:96:cc:19:16:73:b6:be:91:57:40:a2:a6:
                    af:79:07:67:2f:64:6c:ac:8f:fb:f1:dd:fc:ef:96:
                    f4:b0:a2:87:d0:21:1d:9c:2a:0b:ea:81:17:92:bc:
                    db:4a:f4:36:91:37:ac:10:9c:7b:8c:d6:57:de:c2:
                    1a:2e:d8:f5:fe:01:e6:68:d7:96:f8:ee:1f:df:83:
                    c9:d1:0c:25:84:42:f5:60:d6:f6:a6:c3:07:d1:78:
                    a1:fc:ee:9e:41:42:fd:12:94:61:4e:64:72:62:ab:
                    29:62:2e:93:43:0b:07:d6:b5:95:d3:f7:ca:cd:79:
                    87:70:50:29:c5:bb:42:10:14:7a:27:08:26:87:80:
                    59:f4:39:d3:7a:fe:ca:b1:4e:4b:71:49:c0:4d:56:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:59:39:E2:8F:D0:EC:3E:8B:44:C3:04:B9:6F:E4:EC:1C:68:AF:A4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7873E4989F9A11F1A5043CDCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:d9:4e:96:a0:47:0b:53:30:d1:80:05:45:39:ad:1a:81:9a:
         d3:e4:2d:3c:d3:63:e8:2a:dd:10:88:e0:be:66:99:bd:e3:c4:
         d3:5a:86:0b:6b:6d:24:5c:11:78:f7:3f:50:98:b8:ce:db:f1:
         76:b8:30:07:e1:c3:01:ff:41:fb:dd:76:bf:58:91:36:da:dc:
         de:97:9b:60:e2:78:41:2d:45:8f:3b:44:60:f4:90:08:dc:4d:
         8c:34:fd:aa:98:47:72:0d:4d:01:64:c5:3a:21:e0:3c:52:26:
         1c:3c:28:5c:f8:8e:45:8d:e5:90:96:8a:e0:a0:fb:2f:de:f4:
         ae:0d:38:43:77:bb:c4:49:9b:e6:2d:74:b0:74:14:da:d6:6d:
         01:f3:32:df:de:a3:a7:5c:8d:79:06:4e:fe:98:04:04:79:dc:
         6c:f3:fd:29:92:4e:28:47:57:ab:3c:3a:a9:af:52:cd:2e:04:
         21:c3:05:dc:91:7e:1d:dd:c4:d4:00:9a:83:0a:2e:9e:ce:91:
         e1:e2:b3:df:e5:0e:f2:2e:95:87:9a:92:36:23:da:48:fd:28:
         37:3b:b0:43:4a:e8:e1:45:95:1a:7c:85:54:c3:c7:a3:22:c2:
         fd:38:ed:7b:ad:56:f7:4f:18:a6:c1:e7:36:4c:31:c6:ac:2c:
         0e:97:28:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----